Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sT2BP04bOzx-1wrEsvjRalWojW8.roa
File: sT2BP04bOzx-1wrEsvjRalWojW8.roa (raw, json)
Hash identifier: U4GlMjR+40iUUTeQc0A/OwNB8Hgd/2vA7OTymZyrL6g=
Subject key identifier: B1:3D:81:3F:4E:1B:3B:3C:7E:D7:0A:C4:B2:F8:D1:6A:55:A8:8D:6F
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01938996A0404CB09D9C63EB5EF439AC00D8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sT2BP04bOzx-1wrEsvjRalWojW8.roa
Signing time: Mon 02 Dec 2024 22:56:10 +0000
ROA not before: Mon 02 Dec 2024 22:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215472
IP address blocks: 2a0c:9a40:8ac0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:96:a0:40:4c:b0:9d:9c:63:eb:5e:f4:39:ac:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 2 22:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b13d813f4e1b3b3c7ed70ac4b2f8d16a55a88d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:7e:a7:6f:b2:a6:d9:6d:df:bb:1e:66:f8:
55:b0:78:b6:02:98:47:95:b4:ac:58:40:cd:35:78:
3c:ed:4a:3e:b1:b8:a3:f9:64:48:98:86:d7:9e:fe:
38:49:76:5a:3a:74:0e:d3:07:0e:33:58:72:cc:81:
0d:85:1f:84:b3:c6:de:0b:b2:28:d9:4f:6f:04:d2:
33:d6:3b:5d:f1:e4:36:c5:c8:37:39:f8:44:55:fc:
0f:98:26:04:a0:8f:d8:0c:dc:d1:64:43:56:32:60:
74:d3:75:0c:b5:f3:e9:3c:6c:a8:63:66:9c:b4:cd:
a7:6a:3c:35:45:e7:ed:0d:a5:b2:03:1b:cb:55:bc:
fb:9b:2f:6e:7b:22:01:43:a9:21:43:a9:f9:29:bb:
61:c2:9a:4a:c0:ff:53:f0:7d:2c:78:78:dd:97:37:
ef:12:63:2d:28:74:6b:32:44:57:b6:99:25:8c:90:
b3:d4:ea:d6:2b:f1:78:fa:80:f0:3e:4d:a2:a0:ed:
f1:cb:63:13:48:99:69:90:87:18:79:c3:19:1d:c6:
0e:f4:f5:89:83:03:97:0b:52:87:82:48:9c:22:9f:
af:dd:7e:8a:a1:2b:04:6e:ed:76:65:2b:8c:50:52:
62:b0:3b:aa:ef:f9:a8:1b:f7:ab:fd:af:20:0a:59:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:81:3F:4E:1B:3B:3C:7E:D7:0A:C4:B2:F8:D1:6A:55:A8:8D:6F
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/sT2BP04bOzx-1wrEsvjRalWojW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ac0::/44
Signature Algorithm: sha256WithRSAEncryption
c8:8a:64:a6:c0:00:eb:1e:6a:11:a4:3f:f4:d6:f2:45:f2:6a:
a5:b7:91:0d:f4:31:0e:ab:2e:aa:25:7e:63:10:af:c3:96:16:
ba:a5:05:92:ab:64:fe:3b:c8:ad:d3:03:97:7b:83:29:be:32:
4e:9e:a1:f3:e4:c2:fe:a1:3d:12:b0:31:a9:0d:d9:8f:1d:1d:
dd:22:20:cd:68:be:cc:88:c3:fb:c2:43:b5:73:72:82:ce:c2:
37:5c:17:c6:5a:fd:4d:00:e2:aa:0e:57:d8:cb:7c:71:06:3e:
3d:6d:91:be:34:b3:9a:89:11:79:c0:29:92:13:28:ff:3d:7d:
e5:10:8b:29:f3:cd:9e:d3:56:37:c1:3c:8a:52:6e:52:7a:30:
f2:c0:aa:20:43:08:22:56:a7:8a:71:2c:2f:f2:2d:fa:13:5d:
57:e5:27:6f:49:bb:05:af:a1:d9:99:42:aa:3a:aa:db:41:73:
4b:06:87:a7:8d:c8:99:a9:dc:69:fb:31:a0:3a:5a:95:b3:e0:
1c:24:d6:37:18:34:1b:a5:fb:97:2b:cc:92:33:f3:c3:44:d1:
79:d7:88:79:ad:02:68:2e:0c:69:97:17:54:d0:ec:ae:c8:be:
c7:03:9e:73:ca:28:ab:b6:9d:66:c1:e0:fc:c6:0d:6b:5b:de:
af:ad:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:53 2025 by rpki-client